Phylax

Phylax is a security layer that prevents AI coding agents from accessing sensitive files on Windows machines. It uses real OS-level ACLs and Mandatory Integrity Control labels so the kernel itself blocks unauthorized access before agents can read secrets, delete migrations, or modify config files. The tool detects Claude Code, Cursor, OpenCode, Copilot, Windsurf, Aider, and other agents by process name and environment variables.

Everything runs locally with no cloud, accounts, or telemetry. Users define protection rules in a TOML configuration file, and all access attempts are logged to a local SQLite database. Phase 1 uses user-mode ACL enforcement; a kernel minifilter driver is in development. The project is open source under Apache 2.0 and includes a web dashboard and terminal UI for monitoring.